CVE-2007-0626

This CVE affects Drupal’s comment_form_add_preview() in the comment.module, vulnerable in Drupal versions before 4.7.6 and 5.x before 5.1, and vbDrupal. The root cause is that previewed comments bypass normal form validation, and attackers with the right privileges ("post comments") and access to...